1 Event, 2 Firewalls, 2 Pop-Up messages ???

Answers

I think you should post a query with a reference to this URL on
Shields Up and maybe comp.security.firewalls also.

Heck, this might even be worth posting on the Unofficial AtGuard
User's Forum!

(This _is_ serious, right?? Not an overdue April fool's kind of
thing???)

Allen tells me we are now famous at ShieldsUp, incidentally!

-- Anonymous, August 27, 2000

Speculation:

This seems to be a Sub7 portscan, sometimes you get one or more of
them immideately after the initial attempt. Since the times are
different (1 second but...) ZA maybe missed the second attempt
(because it was busy processing the first one) or (more likely) the
connection attempt was captured by both at the same time. For a more
detailed analysis it would be necessary to know how the "famous" ZA
True Vector Engine operates (AtGuard seems to filter TDI messages).